Hackers can listen to your Facebook Messenger’s audio recordings

Hi-Tech Adina Camarasu
http://stocknewsusa.com/wp-content/uploads/2017/01/messenger-3-1-1024x880.png

A security issue discovered in Facebook Messenger allows hackers to intercept your private audio messages.

Use the audio messages function on Messenger seems to be in black or white shades, with very few shades of gray in between. There are people who do not embrace this feature and users who base their conversations messages solely on audio recordings.

Still, other people maybe have sent only 10 messages since the voice function has been implemented.

The audio clips sent via Messenger are prone to a simple MITM type of attack. This means of attacking is also known as the ‘man-in-the-middle’.

In other words, a third party intercepts the message on the way that it makes from you to your discussion partner. The vulnerability was discovered by Mohamed A. Baset, an online security researcher.

Intercepting audio messages

When a person records an audio message and sends it to someone else, the clip is uploaded to the Facebook servers.

From there, the file reaches the communication partner and the transfer takes place through an HTTPS network.

A hacker who wants to perform an MITM attack type against a Facebook user can launch an SSL Strip attack.

So, he can extract the absolute link, that also includes the authentication key for all the files that are sent through the conversation.

Thus, the files can be easily obtained, shows fossbytes.com.

HSTS or HTTP Strict Transport Security is a new technology that improves the Internet security.

In this way, the browsers are forced to access websites only via an HTTPS connection. Unfortunately, Facebook does not use another protocol type besides the HSTS.

The company is already aware of this problem but has not yet provided a solution.

Also, they have not offered any reward for discovering the problem.